Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa
File:                     1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa (raw, json)
Hash identifier:          RYt9Ef8RRmgzy0dLUOhGzBJyyLhNSYeunN5vWlIJvaM=
Subject key identifier:   4F:A3:03:51:4F:96:4E:58:54:95:F9:DB:94:27:7F:71:04:BB:D5:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956AD05389621433AE8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396580
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:6a:d0:53:89:62:14:33:ae:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=3257ddaf-78a7-4b6a-9775-d2174d2f57b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:15:ac:33:de:c8:32:97:97:2f:d6:19:ff:
                    0e:ab:e4:28:2c:04:01:4f:4e:9f:b4:5e:a4:30:65:
                    6b:a2:70:9e:0c:af:c5:ca:5f:c7:de:38:96:dc:be:
                    a7:fb:ac:c3:8e:a0:9d:5e:25:dc:e0:d0:2b:1e:b8:
                    e9:0d:c6:95:83:01:7d:6a:c0:79:ca:4e:28:f0:dd:
                    3f:18:65:71:fe:49:86:08:9e:28:98:20:55:95:ad:
                    01:2a:a7:99:4d:2c:4c:ef:44:97:54:19:f8:bc:f6:
                    30:7e:8b:ed:9b:b4:d1:a0:af:49:d0:ed:4e:ba:29:
                    48:27:13:02:88:49:0d:3a:21:f9:6e:06:fb:ac:14:
                    86:1a:bf:1d:66:39:8a:37:60:d2:af:78:88:ca:85:
                    ed:5e:eb:b7:bd:55:0c:ef:62:0f:c6:d4:65:b7:ec:
                    c1:d7:b4:05:4a:37:d8:f5:f5:9a:18:0a:42:9b:36:
                    21:09:81:b3:ad:e5:76:83:8e:a5:9b:b1:c1:b9:bc:
                    b1:58:da:99:4d:1f:4e:62:73:14:52:d1:e6:e3:d6:
                    f5:62:40:8a:01:99:90:67:39:9f:33:4e:e1:12:33:
                    c1:c1:b1:68:85:c8:9f:ac:c4:52:91:a7:42:1a:82:
                    6a:ff:aa:ca:43:67:d2:b4:01:93:2d:60:d8:96:ff:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:03:51:4F:96:4E:58:54:95:F9:DB:94:27:7F:71:04:BB:D5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e38cf40-3a5b-3eb9-8ce4-8949800feb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:9d:e7:ef:33:e8:50:d9:26:81:93:7f:96:33:d6:d4:59:e9:
         7c:3a:fa:df:8b:52:b6:e2:75:e2:9e:21:4f:2a:f8:44:ba:ea:
         77:25:62:aa:f6:67:d5:1b:47:aa:df:a1:5a:08:c1:de:c9:ad:
         35:cd:18:03:01:21:b0:9e:24:f3:60:7b:4d:21:2a:52:1b:0f:
         e1:55:d7:f3:33:15:08:b4:65:3c:a7:34:30:73:98:30:50:a5:
         93:ef:bd:a5:96:99:68:1b:97:d6:49:41:d7:ee:6a:17:9f:b9:
         bb:cc:54:9e:fd:50:b4:ad:8f:ce:05:97:97:cf:f7:4f:b7:f4:
         b8:12:78:71:cf:2c:51:a0:00:a3:c3:ed:a8:3c:c7:48:f7:f6:
         28:be:03:8f:3c:dc:44:aa:fe:e7:2c:30:ef:0f:20:9f:cd:1d:
         67:8f:41:8b:62:8c:78:1e:3d:3a:3d:ce:4f:d4:09:12:86:90:
         f6:f1:c0:b7:49:04:bb:4b:6d:77:9e:4f:a3:87:09:e6:d4:96:
         fb:34:e6:b3:74:cb:af:1b:41:77:68:06:5e:e3:89:86:2e:85:
         65:d3:50:bf:e8:74:e7:86:2d:20:fa:83:c8:3f:2d:84:8d:f0:
         d5:fb:76:bc:ff:ba:b5:95:d0:05:b1:89:3f:97:47:04:55:d7:
         cc:f1:e7:12
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2GlWrQU4liFDOugAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
MzI1N2RkYWYtNzhhNy00YjZhLTk3NzUtZDIxNzRkMmY1N2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEYVrDPeyDKXly/WGf8Oq+QoLAQBT06ftF6k
MGVronCeDK/Fyl/H3jiW3L6n+6zDjqCdXiXc4NArHrjpDcaVgwF9asB5yk4o8N0/
GGVx/kmGCJ4omCBVla0BKqeZTSxM70SXVBn4vPYwfovtm7TRoK9J0O1OuilIJxMC
iEkNOiH5bgb7rBSGGr8dZjmKN2DSr3iIyoXtXuu3vVUM72IPxtRlt+zB17QFSjfY
9fWaGApCmzYhCYGzreV2g46lm7HBubyxWNqZTR9OYnMUUtHm49b1YkCKAZmQZzmf
M07hEjPBwbFohcifrMRSkadCGoJq/6rKQ2fStAGTLWDYlv+DZQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE+jA1FPlk5YVJX525Qnf3EEu9WXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWUzOGNmNDAtM2E1Yi0z
ZWI5LThjZTQtODk0OTgwMGZlYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAWnefvM+hQ2SaBk3+WM9bUWel8Ovrfi1K24nXi
niFPKvhEuup3JWKq9mfVG0eq36FaCMHeya01zRgDASGwniTzYHtNISpSGw/hVdfz
MxUItGU8pzQwc5gwUKWT772llploG5fWSUHX7moXn7m7zFSe/VC0rY/OBZeXz/dP
t/S4EnhxzyxRoACjw+2oPMdI9/YovgOPPNxEqv7nLDDvDyCfzR1nj0GLYox4Hj06
Pc5P1AkShpD28cC3SQS7S213nk+jhwnm1Jb7NOazdMuvG0F3aAZe44mGLoVl01C/
6HTnhi0g+oPIPy2EjfDV+3a8/7q1ldAFsYk/l0cEVdfM8ecS
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:38 2026 by rpki-client